override-login-error.php

// Don't reveal username when password is incorrect but username is correct.
function override_login_error(){
  return '<strong>ERROR</strong>: Incorrect username or password.';
}
add_filter( 'login_errors', 'override_login_error' );